Splunk Enterprise

Why does Splunk Licensing Warnings pop up when adding sources after installing Splunk Enterprise on Ubuntu 20.04?

jonare
Engager

Hello

I have installed Splunk Enterprise on Ubuntu 20.04 two times now, but I get warnings from licensing when adding sources.

I installed a 5GB/days license and added a syslog udp/1514 and a new index. After this splunk starts complaining about:

 

This deployment is subject to license enforcement. Search is disabled after 45 warnings over a 60-day window Learn more

Licensing alerts notify you of excessive indexing warnings and licensing misconfigurations

 

 

1 cle_pool_over_quota message reported by 1 indexer	Correct by midnight to avoid warning

 

Can anyone help me in the right direction ? The total amout of data = 0MB, so this is clearly not correct.

Regards, Jon

Labels (1)
0 Karma
Get Updates on the Splunk Community!

2024 Splunk Career Impact Survey | Earn a $20 gift card for participating!

Hear ye, hear ye! The time has come again for Splunk's annual Career Impact Survey!  We need your help by ...

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...